Static task
static1
Behavioral task
behavioral1
Sample
ORDER QTN 07449 REV.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ORDER QTN 07449 REV.exe
Resource
win10v2004-20220812-en
General
-
Target
ORDER QTN 07449 REV.exe
-
Size
6KB
-
MD5
449e5a75c2c5380ebd11b6dac17a89e0
-
SHA1
639aa73346acf010f8751c244e2a8ad4c5a871b1
-
SHA256
fed94748fd1337dd36ba09fa37e405e05c82a9037e270c5b79f2583de7aa3a9a
-
SHA512
e4be39791e62b7e106ff1b1a84865099cdd72a7683c38cc5b6212a5b1f6ec148c9da3c1fe803c9681ec80af19006dbaedc3c03431b16fe335bb41e7989783ba8
-
SSDEEP
96:LRacttzW5XhvwbLlPB7r+yaWMMh4QDlfuzNt:LRTzWFJwbLlJ7rLfN/Bfo
Malware Config
Signatures
Files
-
ORDER QTN 07449 REV.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ